The invention discloses a terminal
certificate state abnormity monitoring method and device based on flow analysis,
electronic equipment and a storage medium, and belongs to the field of
network security monitoring, and the method comprises the steps: obtaining a
certificate load message and current
system time sent by a network access terminal in a
key exchange process; analyzing the message to obtain a
certificate public key, certificate deadline and a device
unique identifier, and calling a historical
fingerprint sequence from a local
database according to the device
unique identifier; performing hash
processing on the certificate public key to generate a current public key
fingerprint, comparing the current public key
fingerprint with a historical fingerprint sequence, and calculating a difference value between certificate deadline and current
system time to complete timeliness
verification; and integrating the certificate state
verification result and the certificate timeliness
verification result, determining the current security state of the network access terminal, and generating a state monitoring report. According to the invention, the problem that the terminal certificate historical consistency abnormity cannot be identified in the prior art can be solved.